Re: Method of setting score for a custom rule to be the required_score ?
On 27 Jun 2018, at 22:17, J Doe wrote: I went back to “man Mail::SpamAssassin::Conf” and can see mention of the shortcircuit plugin . . . is there more documentation (perhaps in another man or perldoc), where the shortcircuit keyword is mentioned ? perldoc Mail::SpamAssassin::Plugin::Shortcircuit For any Perl module that has embedded 'pod' documentation, 'perldoc' provides the best documentation because it is extracted from the actual module rather than relying on a 'man' page that was almost certainly extracted from the module originally but may be stale.
Re: Method of setting score for a custom rule to be the required_score ?
On 28/06/2018 04:17, J Doe wrote: I went back to “man Mail::SpamAssassin::Conf” and can see mention of the shortcircuit plugin . . . is there more documentation (perhaps in another man or perldoc), where the shortcircuit keyword is mentioned ? I'd say a good starting point would be https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Plugin_Shortcircuit.html Daniele
Re: Method of setting score for a custom rule to be the required_score ?
> On Jun 27, 2018, at 6:20 AM, Daniele Duca wrote: > Hi, > > I'd say that a better solution would be to use shortcircuit: > body __BODY_TEST1 . . . > body __BODY_TEST2 . . . > meta CUSTOM_RULE1(__BODY_TEST1 && __BODY_TEST2) > shortcircuit CUSTOM_RULE1 spam > > At least that saves computing power because other rules would not be > processed once a rule is shortcircuited Hi John and Daniele, Thank you for your replies. John - I’d love to submit a patch, but Perl is not one of the languages I speak . . . but if that changes in the near future, I’ll submit one. Daniele - I like your solution in the fact that you mention processing is short-circuited - since mail that meets my rules is already satisfied, additional work by SA is not needed. I went back to “man Mail::SpamAssassin::Conf” and can see mention of the shortcircuit plugin . . . is there more documentation (perhaps in another man or perldoc), where the shortcircuit keyword is mentioned ? Thanks again, - J
Re: Method of setting score for a custom rule to be the required_score ?
On 27/06/2018 02:15, J Doe wrote: Hi John, Ok, good to know. Is it possible with the SA grammar to have variables ? I was thinking I’d have something like the following in my: /etc/spamassassin/local.cf POISON_PILL = 100 Hi, I'd say that a better solution would be to use shortcircuit: body __BODY_TEST1 . . . body __BODY_TEST2 . . . meta CUSTOM_RULE1(__BODY_TEST1 && __BODY_TEST2) shortcircuit CUSTOM_RULE1 spam At least that saves computing power because other rules would not be processed once a rule is shortcircuited Daniele
Re: Method of setting score for a custom rule to be the required_score ?
On Tue, 26 Jun 2018, J Doe wrote: On Jun 26, 2018, at 12:13 AM, John Hardin mailto:jhar...@impsec.org>> wrote: My thinking here is that if this rule ever passes, it should not add a small value to the score but push the score up to the value that required_score is set to. This way, if the custom rule ever matches, it automatically scores the amount required to flag the message as spam because the score applied is the value of required_score. That's called a "poison pill rule", and generally you don't worry about hitting the required score exactly, you just set it to something large - like 10 or 100. Is it possible with the SA grammar to have variables ? I was thinking I’d have something like the following in my: /etc/spamassassin/local.cf POISON_PILL = 100 …and then all the poison pill rules would reference that: score CUSTOM_RULE1 %POISON_PILL …with the advantage being that if I did want to vary the score assigned to all these rules, I could change it in one place ? Not at this time. As we say, "Patches are welcome!" You'd have to do that in a preprocessing stage if you wanted to do that: have a set of "source" rule files with tokens like that which you edit, and run that through a substitution tool to get the local rules files for SA to use. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- The world has enough Mouse Clicking System Engineers. -- Dave Pooser --- 8 days until the 242nd anniversary of the Declaration of Independence
Re: Method of setting score for a custom rule to be the required_score ?
> On Jun 26, 2018, at 12:13 AM, John Hardin <mailto:jhar...@impsec.org>> wrote: > >> Hello, >> >> I was wondering if it is possible to assign a score to a custom rule that >> will evaluate to the value that required_score is set to. >> >> My thinking here is that if this rule ever passes, it should not add a small >> value to the score but push the score up to the value >> that required_score is set to. This way, if the custom rule ever matches, >> it automatically scores the amount required to flag >> the message as spam because the score applied is the value of required_score. >> >> I am wondering if it’s possible to do something like this: >> >> body __BODY_TEST1 . . . >> body __BODY_TEST2 . . . >> meta CUSTOM_RULE1(__BODY_TEST1 && __BODY_TEST2) >> describe CUSTOM_RULE1 My custom rule >> score CUSTOM_RULE1 %required_score >> >> …where that last %required_score is the part I am curious about. >> >> If it’s not possible to do this directly, is there a way to achieve the same >> effect that is used by SA rule writers ? > > That's called a "poison pill rule", and generally you don't worry about > hitting the required score exactly, you just set it to something large - like > 10 or 100. Hi John, Ok, good to know. Is it possible with the SA grammar to have variables ? I was thinking I’d have something like the following in my: /etc/spamassassin/local.cf POISON_PILL = 100 …and then all the poison pill rules would reference that: score CUSTOM_RULE1 %POISON_PILL …with the advantage being that if I did want to vary the score assigned to all these rules, I could change it in one place ? Thanks, - J
Re: Method of setting score for a custom rule to be the required_score ?
On Mon, 25 Jun 2018, J Doe wrote: Hello, I was wondering if it is possible to assign a score to a custom rule that will evaluate to the value that required_score is set to. My thinking here is that if this rule ever passes, it should not add a small value to the score but push the score up to the value that required_score is set to. This way, if the custom rule ever matches, it automatically scores the amount required to flag the message as spam because the score applied is the value of required_score. I am wondering if it’s possible to do something like this: body __BODY_TEST1 . . . body __BODY_TEST2 . . . meta CUSTOM_RULE1(__BODY_TEST1 && __BODY_TEST2) describe CUSTOM_RULE1 My custom rule score CUSTOM_RULE1 %required_score …where that last %required_score is the part I am curious about. If it’s not possible to do this directly, is there a way to achieve the same effect that is used by SA rule writers ? That's called a "poison pill rule", and generally you don't worry about hitting the required score exactly, you just set it to something large - like 10 or 100. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- 9 days until the 242nd anniversary of the Declaration of Independence
Method of setting score for a custom rule to be the required_score ?
Hello, I was wondering if it is possible to assign a score to a custom rule that will evaluate to the value that required_score is set to. My thinking here is that if this rule ever passes, it should not add a small value to the score but push the score up to the value that required_score is set to. This way, if the custom rule ever matches, it automatically scores the amount required to flag the message as spam because the score applied is the value of required_score. I am wondering if it’s possible to do something like this: body __BODY_TEST1 . . . body __BODY_TEST2 . . . meta CUSTOM_RULE1(__BODY_TEST1 && __BODY_TEST2) describe CUSTOM_RULE1 My custom rule score CUSTOM_RULE1 %required_score …where that last %required_score is the part I am curious about. If it’s not possible to do this directly, is there a way to achieve the same effect that is used by SA rule writers ? Thanks, - J
required_score keeps reverting to 5
I have recently updated to 3.2.4 - for some reason my required_score keeps reverting to 5, basically ignoring or everriding the settings in local.cf. The ruleset 10_default_prefs.cf has these settings, and this is where it appears to come from. While I have commented out the offending line(s) in this file, my concern is that the next rule update will overwrite my changes and every time it updates I'll have to play whack-a-mole, re-editing the file. I'm hoping I'm just doing this the wrong way and someone can enlighten me as to the correct method. Thanks. -- Jefferson K Davis Technology and Information Systems Manager Standard School District 1200 North Chester Ave Bakersfield, CA 93308 661.392.2110 This message was sent using IMP, the Internet Messaging Program.
Re: required_score keeps reverting to 5
On Fri, 2 Oct 2009, Jefferson Davis wrote: I have recently updated to 3.2.4 - for some reason my required_score keeps reverting to 5, basically ignoring or everriding the settings in local.cf. Some Linux (presumed) disties have non-standard configuration directories - but when you manually upgrade, the path to it gets set back to the package default. Check for existence of: /etc/spamassassin/ /etc/mail/spamassassin/ ...etc. - C
Why can't I change value of required_score ?
I use spamassassin3.2.1 and simscan1.2 My value of required_score doesn't work in /usr/local/etc/mail/spamassassin/local.cf. I couldn't change required_score's value. The server still looks at old value which I must have been set it. I checked that the server reads /usr/local/etc/mail/spamassassin directory. How can I correct that ?
FW: Why can't I change value of required_score ?
-Original Message- From: James E. Pratt Sent: Tuesday, March 18, 2008 2:36 PM To: 'Yavuz Maslak' Subject: RE: Why can't I change value of required_score ? -Original Message- From: Yavuz Maslak [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2008 2:33 PM To: users@spamassassin.apache.org Subject: Why can't I change value of required_score ? I use spamassassin3.2.1 and simscan1.2 My value of required_score doesn't work in /usr/local/etc/mail/spamassassin/local.cf. I couldn't change required_score's value. The server still looks at old value which I must have been set it. I checked that the server reads /usr/local/etc/mail/spamassassin directory. How can I correct that ? See the file: /var/qmail/control/simcontrol Regards, jamie
RE: Why can't I change value of required_score ?
Apologies, I meant to send this to the qmail-toaster list... :( -Original Message- From: James E. Pratt [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2008 2:38 PM To: [EMAIL PROTECTED] Subject: FW: Why can't I change value of required_score ? -Original Message- From: James E. Pratt Sent: Tuesday, March 18, 2008 2:36 PM To: 'Yavuz Maslak' Subject: RE: Why can't I change value of required_score ? -Original Message- From: Yavuz Maslak [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2008 2:33 PM To: users@spamassassin.apache.org Subject: Why can't I change value of required_score ? I use spamassassin3.2.1 and simscan1.2 My value of required_score doesn't work in /usr/local/etc/mail/spamassassin/local.cf. I couldn't change required_score's value. The server still looks at old value which I must have been set it. I checked that the server reads /usr/local/etc/mail/spamassassin directory. How can I correct that ? See the file: /var/qmail/control/simcontrol Regards, jamie
Re: Per-User required_score
Theo Van Dinter wrote: Well, the problem is that if you run at MTA time, you can't really do per-user configs. spamc -u will work, if there's only 1 user. it won't work with multiple users, such as when there are several recipients for a single message, unless you can get the MTA to split the message up into multiple messages, but that is problematic/has pros+cons assuming the MTA will even let you do it. In postfix you just need to set _destination_recipient_limit for the transport you're using for spamassassin. /Per Jessen, Zürich
Re: Per-User required_score
On Wed, 09 Jan 2008 09:20:26 +0100
Per Jessen [EMAIL PROTECTED] wrote:
Theo Van Dinter wrote:
Well, the problem is that if you run at MTA time, you can't really
do per-user configs.
spamc -u will work, if there's only 1 user. it won't work with
multiple users, such as when there are several recipients for a
single message, unless you can get the MTA to split the message up
into multiple messages, but that is problematic/has pros+cons
assuming the MTA will even let you do it.
In postfix you just need to set _destination_recipient_limit for
the transport you're using for spamassassin.
Yes. One needs to set:
_destination_recipient_limit = 1
However, I have not been able to make it work without altering the
spamd daemon. In particular, spamd looks for a physical account on the
server it is running:
sub handle_user_setuid_basic {
...
my ($name, $pwd, $uid, $gid, $quota, $comment, $gcos, $dir, $etc) =
getpwnam($userid);
if (!defined $uid) {
my $errmsg = spamd: handle_user unable to find user:
'$userid'\n; #die $errmsg if $spamtest-{'paranoid'};
# if we are given a username, but can't look it up, maybe name
# services are down? let's break out here to allow them to get
# 'defaults' when we are not running paranoid
info($errmsg);
return 0;
}
...
}
On our server there is a spamd user account. Therefore, I changed the
'if' section above to:
if (!defined $uid) {
($name, $pwd, $uid, $gid, $quota, $comment, $gcos, $dir, $etc) =
getpwnam(spamd);
}
At this point spamd is able to find a local account and spamc is
correctly ran with the user it is suppose to, i.e.:
spamass unix - n n - 32 pipe
user=spamd argv=/usr/local/bin/spamc -u ${recipient}
-e /usr/local/sbin/sendmail -oi -f ${sender} ${recipient}
---
_|_
(_| |
Per-User required_score
Hi,
I want to give users control of the required_score variable. I am using
Postfix // SpamAssassin // amavis.
I have read the document http://wiki.apache.org/spamassassin/UsingSQL and
have the tests working OKAY.
executing SQL: SELECT preference, value FROM userpref WHERE username =
'[EMAIL PROTECTED]' OR username = '$GLOBAL' OR username =
CONCAT('%','testdomain.com') ORDER BY username ASC
I am however unsure as to how to get Postfix to pass SpamAssassin the
username. Below is an exert of the spamd log which shows the problem :
executing SQL: SELECT preference, value FROM userpref WHERE username =
'nobody' OR username = '$GLOBAL' OR username = CONCAT('%',NULL) ORDER BY
username ASC
--
View this message in context:
http://www.nabble.com/Per-User-required_score-tp14664875p14664875.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Per-User required_score
Within postfix/master.cf I have the following lines :
smtp inet n - - - - smtpd
-o content_filter=spamassassin
This pushes mail through the following lines :
spamassassin unix - n n - - pipe
user=nobody argv=/usr/bin/spamc -f -e
/usr/sbin/sendmail -oi -f ${sender} ${recipient}
Hope this is what you were after...
Thanks,
- David
mouss-2 wrote:
David.Sharpe wrote:
Hi, I want to give users control of the required_score variable. I am
using Postfix // SpamAssassin // amavis. I have read the document
http://wiki.apache.org/spamassassin/UsingSQL and have the tests
working OKAY. /executing SQL: SELECT preference, value FROM userpref
WHERE username = '[EMAIL PROTECTED]' OR username = '$GLOBAL' OR
username = CONCAT('%','testdomain.com') ORDER BY username ASC /I am
however unsure as to how to get Postfix to pass SpamAssassin the
username. Below is an exert of the spamd log which shows the problem :
/executing SQL: SELECT preference, value FROM userpref WHERE username
= 'nobody' OR username = '$GLOBAL' OR username = CONCAT('%',NULL)
ORDER BY username ASC /
how do you run spamassassin?
--
View this message in context:
http://www.nabble.com/Per-User-required_score-tp14664875p14668113.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Per-User required_score
David.Sharpe wrote:
Hi, I want to give users control of the required_score variable. I am
using Postfix // SpamAssassin // amavis. I have read the document
http://wiki.apache.org/spamassassin/UsingSQL and have the tests
working OKAY. /executing SQL: SELECT preference, value FROM userpref
WHERE username = '[EMAIL PROTECTED]' OR username = '$GLOBAL' OR
username = CONCAT('%','testdomain.com') ORDER BY username ASC /I am
however unsure as to how to get Postfix to pass SpamAssassin the
username. Below is an exert of the spamd log which shows the problem :
/executing SQL: SELECT preference, value FROM userpref WHERE username
= 'nobody' OR username = '$GLOBAL' OR username = CONCAT('%',NULL)
ORDER BY username ASC /
how do you run spamassassin?
Re: Per-User required_score
David.Sharpe wrote:
Within postfix/master.cf I have the following lines :
smtp inet n - - - - smtpd
-o content_filter=spamassassin
This pushes mail through the following lines :
spamassassin unix - n n - - pipe
user=nobody argv=/usr/bin/spamc -f -e
/usr/sbin/sendmail -oi -f ${sender} ${recipient}
Hope this is what you were after...
so you need to pass the user to spamc (-u ${user} for example).
Re: Per-User required_score
Well, the problem is that if you run at MTA time, you can't really do per-user
configs.
spamc -u will work, if there's only 1 user. it won't work with multiple
users, such as when there are several recipients for a single message, unless
you can get the MTA to split the message up into multiple messages, but that
is problematic/has pros+cons assuming the MTA will even let you do it.
So in short, if you want per-user configs, switch to running SA at the MDA
(procmail, maildrop, etc.)
On Mon, Jan 07, 2008 at 10:29:43PM +0100, mouss wrote:
David.Sharpe wrote:
Within postfix/master.cf I have the following lines :
smtp inet n - - - - smtpd
-o content_filter=spamassassin
This pushes mail through the following lines :
spamassassin unix - n n - - pipe
user=nobody argv=/usr/bin/spamc -f -e
/usr/sbin/sendmail -oi -f ${sender} ${recipient}
Hope this is what you were after...
so you need to pass the user to spamc (-u ${user} for example).
--
Randomly Selected Tagline:
It's more about the opportunity to make an impact and the challenge to
be successful than it is about the title.
- Paul M. Moriarty in [EMAIL PROTECTED]
pgpIxZPNn8ZV0.pgp
Description: PGP signature
Re: Per-User required_score
On Mon, 7 Jan 2008, Theo Van Dinter wrote:
Well, the problem is that if you run at MTA time, you can't really do per-user
configs.
spamc -u will work, if there's only 1 user. it won't work with multiple
users, such as when there are several recipients for a single message, unless
you can get the MTA to split the message up into multiple messages, but that
is problematic/has pros+cons assuming the MTA will even let you do it.
So in short, if you want per-user configs, switch to running SA at the MDA
(procmail, maildrop, etc.)
If you -only- need Per-User required_score you may be able to achieve
that via a two stage process.
Run SA at your MTA level but have it -only- add a specific header with the
score value. Then in your delivery process have some kind of customized
delivery agent that would look up the Per-User required_score, combine
that with the SA header score and take the specific user desired
action. (change subject header, route to 'Junk' folder, etc).
This would have the disadvantage of defeating the one main reason for
running SA at the MTA level (the ability to SMTP-REJECT spam).
--
Dave Funk University of Iowa
dbfunk (at) engineering.uiowa.eduCollege of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_adminIowa City, IA 52242-1527
#include std_disclaimer.h
Better is not better, 'standard' is better. B{
Re: Per-User required_score
David,
I want to give users control of the required_score variable.
I am using Postfix // SpamAssassin // amavis.
...
spamassassin unix - n n - - pipe
user=nobody argv=/usr/bin/spamc -f -e
/usr/sbin/sendmail -oi -f ${sender} ${recipient}
If your concern is to have per-user SQL-based spam scores,
but want to keep SpamAssassin at the MTA level, and since you
are already using amavisd-new - why not let amavisd call SA
directly, and provide its SQL (or LDAP) lookups functionality.
This allows SpamAssassin to only be invoked once per message,
yet still offer individual per-recipient spam levels, individual
pass/block settings, ..., even for multi-recipient messages.
Mark
Re: required_score
Jason Bertoch wrote: On Tuesday, October 30, 2007 5:36 PM maillist wrote: SpamAssassin version 3.2.3 running on Perl version 5.8.8 mimedefang version 2.63 sendmail Version 8.14.0 Check for either /etc/mail/sa-mimedefang.cf or /etc/mail/spamassassin/sa-mimedefang.cf Jason A. Bertoch Network Administrator [EMAIL PROTECTED] ElectroNet Intermedia Consulting 3411 Capital Medical Blvd. Tallahassee, FL 32308 (V) 850.222.0229 (F) 850.222.8771 You were exactly correct. I upgraded mimedefang a couple of weeks ago. I guess that file was overwritten. Thanks -Aubrey
RE: required_score
On Tuesday, October 30, 2007 5:36 PM maillist wrote: SpamAssassin version 3.2.3 running on Perl version 5.8.8 mimedefang version 2.63 sendmail Version 8.14.0 Check for either /etc/mail/sa-mimedefang.cf or /etc/mail/spamassassin/sa-mimedefang.cf Jason A. Bertoch Network Administrator [EMAIL PROTECTED] ElectroNet Intermedia Consulting 3411 Capital Medical Blvd. Tallahassee, FL 32308 (V) 850.222.0229 (F) 850.222.8771
required_score
SpamAssassin version 3.2.3 running on Perl version 5.8.8 mimedefang version 2.63 sendmail Version 8.14.0 I have been running spamassassin for over 2 years now, and suddenly, the required score has changed. I have it set to 7.0, but it has suddenly changed back to the default of 5.0. I only noticed it today, and haven't got a clue as to where it's pulling the required score from. /etc/mail/spamassassin/local.cf: require_score 7.0 I am no using any user_prefs anywhere (that I know of). But just in-case I was, I changed all instances of any file called user_prefs to 7.0. If I run spamc -c message, I get back 5.5/7.0 if I run spamassassin -t message I also get back the correct score. I start spamd as root like this /usr/bin/spamd -r /var/run/spamd.pid \ -d --username=defang --max-spare=8 --min-children=10 --max-children=45 Any help is appreciated. -Aubrey
required_score not working?
Greetings, Am I correct in saying that the proper way to set a default required_score is in the /etc/mail/spamassassin/local.cf file? I'm running SA 3.2.0 and I seem to be unable to change the default required_score. I'm using spamc/spamd for processing via simscan. Per-user rules are enabled and seem to be working fine. If the user does not have any preferences set, however, I thought the default required_score from the local.cf file was used. Is that not the case? spamd is run with the following options : -d -q -x -m25 --min-children 10 --min-spare 5 --max-spare 10 --socketpath=/tmp/spamd.sock --syslog-socket=none I'm attempting to lower the default required_score because I'm seeing a ton of incoming spam that's flying just under the default score of 5.0. Per-user scores are not working because simscan drops to defaults if there is more than one rcpt_to, and most of the incoming spam is BCC spam. Speaking of which, is there any sort of BCC rule that pumps up the score if the mail is BCCed? I can see a problem with mailing lists, though Would it be possible to trigger on the mailing list headers as well? Thanks, -- Jason 'XenoPhage' Frisvold [EMAIL PROTECTED] http://blog.godshell.com
required_score aggressive ??
When looking up required_score info, as most know, it say that the default is 5.0 and that it is considered aggressive in various circumstances Used to be called required_hits When I first started using SA I was told that as an ISP going in the 4.0 range give or take a little was an excellent choice. If you are able to chime in, please share your wisdom in any area about required_score and/or just how aggressive is everyone on the list as I am thinking of tweaking a little lower. Thanks in advance - rh -- Robert - Abba Communications Computer Internet Services (509) 624-7159 - www.abbacomm.net
Re: required_score aggressive ??
R Lists06 wrote: When looking up required_score info, as most know, it say that the default is 5.0 and that it is considered aggressive in various circumstances Used to be called required_hits When I first started using SA I was told that as an ISP going in the 4.0 range give or take a little was an excellent choice. If you are able to chime in, please share your wisdom in any area about required_score and/or just how aggressive is everyone on the list as I am thinking of tweaking a little lower. I'd stick with the default until you see how SA performs. I've been using the default threshold of 5 on two ISP mail systems for ~4+ years, and my own personal server for longer, with very little trouble. The occasional (rare) FPs have seen scores anywhere from just over 5 up to ~15 or so IIRC. IMO it's better to tweak rule scores than to use the VERY blunt instrument of changing the spam threshold score. -kgd
RE: required_score aggressive ??
I use sendmail and spamassassin-milter. I configured SA to tag messages as spam if they score 6.0 points. The milter rejects if the score gets above 15. I use every plugin available, dcc, fuzzy, razor, pyzor, DNSBL etc, so usually spam scores above 15, and I have never seen a false positive with a score higher than that. This counts for about 80-85% of all spam I receive, and spam being 90-95% of total mail volume. Messages that score between 6.0 and 15.0 are delivered to the user (on exchange), with altered subject and original message as attachment (report_safe). I would say, that bayes is the most valuable tool when it comes to messages that have a lower spam score. Almost all messages that score 6-9 points are scored 3.5 by bayes (99-100% certainty) and hence would not be tagged as spam if I would not use bayes. This is about 10-15% of all spam I receive. The remaining 5-10% scores 10-15. I have seen only a few false positives in the 6-15 range, never scored by bayes. In my set up bayes has a near 100% accuracy. ISPs usually reject all mail above a certain score, regularly set to 4-5. This will result in more FPs, considering their usually high mail volume. In the end it's all a choice between relaying more spam to subscribers or putting more work into manually whitelisting etc. But in any case the configuration should include bayes, DNS blacklisting and the usual regexp rules. For higher accuracy, but also higher server loads, other plugins can be used too. -Sietse -Original Message- From: R Lists06 [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 06, 2006 4:45 PM To: users@spamassassin.apache.org Subject: required_score aggressive ?? When looking up required_score info, as most know, it say that the default is 5.0 and that it is considered aggressive in various circumstances Used to be called required_hits When I first started using SA I was told that as an ISP going in the 4.0 range give or take a little was an excellent choice. If you are able to chime in, please share your wisdom in any area about required_score and/or just how aggressive is everyone on the list as I am thinking of tweaking a little lower. Thanks in advance - rh -- Robert - Abba Communications Computer Internet Services (509) 624-7159 - www.abbacomm.net
Re: required_score aggressive ??
I use a required_score of 3 and so far have had zero positives (more than 3 years running). I have customers that also run 3 and have opted to have the server /discard/ the message (not quarantine, but /DISCARD/) if it is identified as spam. So far none of those users have complained about not receiving e-mail. -=Ray R Lists06 wrote: When looking up required_score info, as most know, it say that the default is 5.0 and that it is considered aggressive in various circumstances Used to be called required_hits When I first started using SA I was told that as an ISP going in the 4.0 range give or take a little was an excellent choice. If you are able to chime in, please share your wisdom in any area about required_score and/or just how aggressive is everyone on the list as I am thinking of tweaking a little lower. Thanks in advance - rh -- Robert - Abba Communications Computer Internet Services (509) 624-7159 - www.abbacomm.net
Re: required_score aggressive ??
On Wed, 6 Dec 2006, Ray Anderson wrote: I use a required_score of 3 and so far have had zero positives (more than 3 years running). I have customers that also run 3 and have opted to have the server /discard/ the message (not quarantine, but /DISCARD/) if it is identified as spam. So far none of those users have complained about not receiving e-mail. -=Ray R Lists06 wrote: When looking up required_score info, as most know, it say that the default is 5.0 and that it is considered aggressive in various circumstances Used to be called required_hits When I first started using SA I was told that as an ISP going in the 4.0 range give or take a little was an excellent choice. If you are able to chime in, please share your wisdom in any area about required_score and/or just how aggressive is everyone on the list as I am thinking of tweaking a little lower. We handle mail for a few thousand domains and probably process a few million emails per day. What we've found is 5-7 is quite aggressive, and does catch a few legit emails for a small group of users. 7-9 is moderate and catches a large majority of spam, and minimizes false positives to only a few each day. 9 is what we consider a safe number to get false hits down to zero or as close as possible while still catching a good deal of spam. This is of course with RBLs, SARE, Fuzzy, Botnet, etc... Rob
Re: setting required_score between each email message test?
Theo Van Dinter wrote: On Mon, Jun 05, 2006 at 04:36:24PM -0400, Joe Flowers wrote: Is there a way to set the required_score on the fly between each email message test? You haven't stated what you're trying to do, but you could update the user preference between spamassassin/spamc runs, depending on your configuration. Hey Theo! This is Joe Schmoe. I'm the one who doesn't use spamc nor spamd, but has a C program that calls spamassassin though Perl. The one with the floating spam/ham dividing line. This dividing line is calculated and updated by the C program on the fly after each message and is kept outside of and independent of SpamAssassin. I was thinking that if there was some way to move this dividing line back inside of SA that that might be a better, more effective integration. For example, I was thinking that the bayes_auto_learn function would be more effective, assuming that the bayes_auto_learn_threshold_nonspam and bayes_auto_learn_threshold_spam values are not hard coded to an absolute frame but are kept relative to the required_score value. There may very well be other metrics inside of SA that I am unaware of that are somehow a function of the required_score value, since that seems to be the key magic dividing line within SA. I tried changing the required_score in /etc/mail/spamassassin/local.cf but it is unsurprisingly not rescanned/reloaded between each message that is tested. It's not terribly surprising imo. I thought that's what I said. Did I put too many negatives in that sentence? For my case, if there was just some one line text file that I could #include that held that value, it would work great for me. Best, Joe
setting required_score between each email message test?
Is there a way to set the required_score on the fly between each email message test? I tried changing the required_score in /etc/mail/spamassassin/local.cf but it is unsurprisingly not rescanned/reloaded between each message that is tested. It would really be cool (not to mention extremely helpful) if this could be done. Thanks! Joe Running sa v3.1.2.
Re: setting required_score between each email message test?
On Mon, Jun 05, 2006 at 04:36:24PM -0400, Joe Flowers wrote: Is there a way to set the required_score on the fly between each email message test? You haven't stated what you're trying to do, but you could update the user preference between spamassassin/spamc runs, depending on your configuration. I tried changing the required_score in /etc/mail/spamassassin/local.cf but it is unsurprisingly not rescanned/reloaded between each message that is tested. It's not terribly surprising imo. Most daemons don't re-read their config/restart automatically. The fact you have to restart spamd is well documented, fwiw. -- Randomly Generated Tagline: When cryptography is outlawed, gjklj nbvmiou wtkj kd;ie4 skt klbjxdf. - Unknown pgpCbZSfcnfVT.pgp Description: PGP signature
Re: required_score
On Fri, Jun 02, 2006 at 06:24:14PM +0200, Julien Michaux wrote: I use the lastest spamassassin version, postfix 2.2, clamav, courier-imap and openLDAP. My operating system is Debian testing with kernel 2.6.12. There's something else too which you didn't list. X-Spam-Status: No, score=3.65 tagged_above=2 required=6.31 tests=[DATE_IN_FUTURE_06_12=1.498, FORGED_HOTMAIL_RCVD=2.152] It's like the required_score option is ignore... What happen? That isn't a standard header (tagged_above indicates you're using some other program to call SA), so I'd look at that to figure out the configuration. -- Randomly Generated Tagline: Now it's time for pay back ... Can someone lend me enough for a Coke? - Chris Bentley pgpHseKv0dUt5.pgp Description: PGP signature
RE: required_score
Julien Michaux wrote: Hi everybody, I have a problem using spamassassin. The required_score option doesn't work... I use the lastest spamassassin version, postfix 2.2, clamav, courier-imap and openLDAP. My operating system is Debian testing with kernel 2.6.12. I set the required_score option to 5 and when I received a spam I see always this line : X-Spam-Score: 3.65 X-Spam-Level: *** X-Spam-Status: No, score=3.65 tagged_above=2 required=6.31 tests=[DATE_IN_FUTURE_06_12=1.498, FORGED_HOTMAIL_RCVD=2.152] It's like the required_score option is ignore... Are you using Amavis? If so, the required_score option is ignored and the Amavis setting is used instead. -- Bowie
RE: required_score
Michaux Julien wrote: Yes I use amavis... So it's in the amavis configuration that I have to set the required_score? Do you know it is? Search amavisd.conf for sa_tag_level. This should find all of the score settings for amavis. Amavis is much more flexible than SA alone and has more than just a single setting. For more details on the various settings, see the amavis docs. -- Bowie
where is required_score being set ...
All, I have set required_score to 8.0 and restarted spamd. But new email coming in is showing a require of 4.5: X-Spam-Status: No, score=1.2 required=4.5 tests=ALL_TRUSTED,BAYES_00 autolearn=no version=3.1.0
reduce required_score for recipient domain
Hi, how do I reduce the required_score from 5.0 to a lower value for a special domain? I'd like to set required_score to 4.3 for all incoming mails to mydomain.org. All other domains should require the standard score of 5.0. Thanks, Marcus
RE: reduce required_score for recipient domain
Marcus Sobchak wrote: how do I reduce the required_score from 5.0 to a lower value for a special domain? I'd like to set required_score to 4.3 for all incoming mails to mydomain.org. All other domains should require the standard score of 5.0. I suppose you could make a rule that matches header ALL =~ /mydomain.org/ with a score of 0.7... -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer
SA 3.0.2 - SQL User Preferences failing for all but required_score
HELP! I cant get this figured out for the life of me. Here is what I have... I have SA 3.0.2, using a Postgres database to store user preferences. When I run a test instance and pass a test message to it (using spamc and spamd) and the blacklist_from entries never get read... Here is my local.cf: user_scores_dsn DBI:Pg:dbname=exim;host=localhost user_scores_sql_usernamespam user_scores_sql_passwordpass user_scores_sql_custom_querySELECT preference, value FROM userpref WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = '%'||_DOMAIN_ ORDER BY username ASC # # These values can be overridden by editing ~/.spamassassin/user_prefs.cf # (see spamassassin(1) for details) # These should be safe assumptions and allow for simple visual sifting # without risking lost emails. required_hits 5 report_safe 0 rewrite_header Subject [SPAM] # Default template. Try to keep it under 78 columns (inside the the dots below). # clear_report_template report Spam detection software, running on the system _HOSTNAME_, has report processed this incoming email If you have any questions, see report _CONTACTADDRESS_ for details. report report Content analysis details: (_SCORE_ points) report report pts rule name description report -- -- report _SUMMARY_ # This file, along with a duplicate of the other files in my /etc/mail/spamassassin folder are stored in /etc/mail/test. I run the following as the test server: spamd -x -q -D -C /etc/mail/test --siteconfigpath=/etc/mail/test -p 9898 And this for the test client: spamc -d localhost -p 9898 -u [EMAIL PROTECTED] mb2 Here are the contents of mb2 From [EMAIL PROTECTED] Wed Feb 2 10:10:15 2005 Return-Path: [EMAIL PROTECTED] X-Originating-IP: [66.194.13.227] X-Originating-Email: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] From: Kevin Marvin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Test Message from CLI Date: Wed, 02 Feb 2005 16:09:21 + Mime-Version: 1.0 Content-Type: text/plain; format=flowed X-OriginalArrivalTime: 02 Feb 2005 16:10:02.0339 (UTC) FILETIME=[A6A6A330:01C50941] This is a test / demo message. It should / should not get tagged based on the SQL settings. I used this message from another mailbox as a template for the header content. - Kevin And here is the log from the server... logmsg: connection from Safe02 [127.0.0.1] at port 35842 debug: Conf::SQL: executing SQL: SELECT preference, value FROM userpref WHERE username = '[EMAIL PROTECTED]' OR username = '$GLOBAL' OR username = '%'||'architel.com' ORDER BY username ASC debug: retrieving prefs for [EMAIL PROTECTED] from SQL server debug: user has changed debug: bayes: no dbs present, cannot tie DB R/O: /usr/exim/.spamassassin/bayes_toks debug: Score set 1 chosen. logmsg: processing message (unknown) for [EMAIL PROTECTED]:501. debug: bayes: no dbs present, cannot tie DB R/O: /usr/exim/.spamassassin/bayes_toks debug: metadata: X-Spam-Relays-Trusted: debug: metadata: X-Spam-Relays-Untrusted: debug: MIME PARSER START debug: main message type: text/plain debug: parsing normal part debug: added part, type: text/plain debug: MIME PARSER END debug: decoding: no encoding detected debug: URIDNSBL: domains to query: debug: Running tests for priority: 0 debug: running header regexp tests; score so far=0 debug: running body-text per-line regexp tests; score so far=0 debug: running uri tests; score so far=0 debug: running raw-body-text per-line regexp tests; score so far=0 debug: running full-text regexp tests; score so far=0 debug: Running tests for priority: 500 debug: running meta tests; score so far=0 debug: running header regexp tests; score so far=0 debug: running body-text per-line regexp tests; score so far=0 debug: running uri tests; score so far=0 debug: running raw-body-text per-line regexp tests; score so far=0 debug: running full-text regexp tests; score so far=0 debug: auto-learn: currently using scoreset 1. debug:
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Marvin wrote: debug: Conf::SQL: executing SQL: SELECT preference, value FROM userpref WHERE username = '[EMAIL PROTECTED]' OR username = '$GLOBAL' OR username = '%'||'architel.com' ORDER BY username ASC If you run the query above in psql what does it give you? Michael -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCpdzaG4km+uS4gOIRAga/AJ44VjU53w8kEuz7PQlOsnpol4n6ZgCcDUIT U461nxACyJjw0oblKxEeQeo= =6tGG -END PGP SIGNATURE-
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
preference| value -+ required_score | 4.0 blacklist_from | [EMAIL PROTECTED] blacklist_from | [EMAIL PROTECTED] score USER_IN_BLACKLIST | 100 required_score | 3.0 report_safe | 0 use_razor2 | 1 use_pyzor | 1 use_dcc | 1 score USER_IN_WHITELIST | -10 use_auto_whitelist | 0 On 6/7/05 12:43 PM, Michael Parker [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Marvin wrote: debug: Conf::SQL: executing SQL: SELECT preference, value FROM userpref WHERE username = '[EMAIL PROTECTED]' OR username = '$GLOBAL' OR username = '%'||'architel.com' ORDER BY username ASC If you run the query above in psql what does it give you? Michael -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCpdzaG4km+uS4gOIRAga/AJ44VjU53w8kEuz7PQlOsnpol4n6ZgCcDUIT U461nxACyJjw0oblKxEeQeo= =6tGG -END PGP SIGNATURE-
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Marvin wrote: preference | value -+ required_score | 4.0 blacklist_from | [EMAIL PROTECTED] blacklist_from | [EMAIL PROTECTED] score USER_IN_BLACKLIST | 100 required_score | 3.0 report_safe | 0 use_razor2 | 1 use_pyzor | 1 use_dcc | 1 score USER_IN_WHITELIST | -10 use_auto_whitelist | 0 I'm not sure if this is it, and I don't have time to test it and see, but it might be the fact that you've got the use_auto_whitelist there which is admin only, and only allowed in a .cf file. Try removing that and see if it helps. Michael -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCpd53G4km+uS4gOIRAgxhAJ4tC0i4IxAMWin38mOQ8h3mXy6xawCaA1Du VxMoh/jZTugWVNIexAurj24= =HcDs -END PGP SIGNATURE-
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Marvin wrote: spamd -x -q -C /etc/mail/test/ --siteconfigpath=/etc/mail/test -p Are you sure you mean -C /etc/mail/test/? Normally that would be something like /usr/share/spamassassin, which is where all of the default .cf/rules files are installed. Michael -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCpeCuG4km+uS4gOIRAuGxAJ0XcBwPgNbNcqgEwayQZG9B2BYUkACfZ8y3 gQrAkc9U1RXDi72hN3FUXkM= =MVGs -END PGP SIGNATURE-
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
You, sir, are a GENIUS! That fixed it perfectly. Thank you very much! Name the brand of e-beer and I will send it your way. - Kevin On 6/7/05 1:00 PM, Michael Parker [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin Marvin wrote: spamd -x -q -C /etc/mail/test/ --siteconfigpath=/etc/mail/test -p Are you sure you mean -C /etc/mail/test/? Normally that would be something like /usr/share/spamassassin, which is where all of the default .cf/rules files are installed. Michael -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCpeCuG4km+uS4gOIRAuGxAJ0XcBwPgNbNcqgEwayQZG9B2BYUkACfZ8y3 gQrAkc9U1RXDi72hN3FUXkM= =MVGs -END PGP SIGNATURE-
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
Kevin Marvin wrote: HELP! I cant get this figured out for the life of me. Here is what I have... I have SA 3.0.2, using a Postgres database to store user preferences. When I run a test instance and pass a test message to it (using spamc and spamd) and the blacklist_from entries never get read... Here is my local.cf: user_scores_dsn DBI:Pg:dbname=exim;host=localhost user_scores_sql_usernamespam user_scores_sql_passwordpass user_scores_sql_custom_querySELECT preference, value FROM userpref WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = '%'||_DOMAIN_ ORDER BY username ASC snip Almost there :-D allow_user_rules1 -- Thanks, James
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
JamesDR wrote: Kevin Marvin wrote: Sorry list, Michael set me straight on allow_user_rules :-D -- Thanks, James
Re: SA 3.0.2 - SQL User Preferences failing for all but required_score
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 JamesDR wrote: Kevin Marvin wrote: HELP! I cant get this figured out for the life of me. Here is what I have... I have SA 3.0.2, using a Postgres database to store user preferences. When I run a test instance and pass a test message to it (using spamc and spamd) and the blacklist_from entries never get read... Here is my local.cf: user_scores_dsn DBI:Pg:dbname=exim;host=localhost user_scores_sql_username spam user_scores_sql_password pass user_scores_sql_custom_query SELECT preference, value FROM userpref WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = '%'||_DOMAIN_ ORDER BY username ASC snip Almost there :-D allow_user_rules 1 WHOA!!! No. Please do not spread this sort of advice around. There are VERY VERY FEW reasons to use allow_user_rules in SpamAssassin. It is not needed at all in this case. For folks running with allow_user_rules turned on I encourage you to evaluate why you are doing so. It opens you up to all sort of security risks and performance problems, and 99.9% of the time not necessary. Michael -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFCpebwG4km+uS4gOIRAskOAKCYVDKCJUmyQSrR5nSDmOCBO7XZFgCeMiMg 29J7RVzuuJ5OCG2FzDe6tiE= =dDUg -END PGP SIGNATURE-
Re: Mail::SpamAssassin to setup required_score
Why Mail::SpamAssassin module always giving output
spam score 0? while if i run spamassassin from console
to check the same sample-spam file it give spam score
4?
--- Markus Hardiyanto [EMAIL PROTECTED]
wrote:
can i use Mail::SpamAssassin to setup
required_score?
i already read the manual but still don't know how
to
do it.
i creating a perl script that calling
Mail::SpamAssassin to check emails is it a spam or
not.
i want that i can configure the required_score
from
my script, not from /etc/spamassassin/local.cf
already try this, but it seems didn't working:
my $spamtest = new Mail::SpamAssassin ({
'config_text' = 'required_score 2'
});
please help
Best Regards,
Markus
__
Do you Yahoo!?
Make Yahoo! your home page
http://www.yahoo.com/r/hs
Best Regards,
Markus
__
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Re: Mail::SpamAssassin to setup required_score
On Fri, May 13, 2005 at 09:05:34AM -0700, Markus Hardiyanto wrote: Why Mail::SpamAssassin module always giving output spam score 0? while if i run spamassassin from console to check the same sample-spam file it give spam score 4? Mail::SpamAssassin doesn't actually check your mail. Please read the POD that comes with the modules if you're planning to access them directly. -- Randomly Generated Tagline: That's not sick and twisted ... that's just horny. - Dan Afonso pgpJNgmfAfu11.pgp Description: PGP signature
Mail::SpamAssassin to setup required_score
can i use Mail::SpamAssassin to setup required_score?
i already read the manual but still don't know how to
do it.
i creating a perl script that calling
Mail::SpamAssassin to check emails is it a spam or
not.
i want that i can configure the required_score from
my script, not from /etc/spamassassin/local.cf
already try this, but it seems didn't working:
my $spamtest = new Mail::SpamAssassin ({
'config_text' = 'required_score 2'
});
please help
Best Regards,
Markus
__
Do you Yahoo!?
Make Yahoo! your home page
http://www.yahoo.com/r/hs
